CVE-2023-33234

Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection. In order to exploit this weakness, a user would already need elevated permissions Op or Admin to change the connection object in this...

Code injection

Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection. In order to exploit this weakness, a user would already need elevated permissions Op or Admin to change the connection object in this...

CVE-2023-33234 Apache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration

Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection. In order to exploit this weakness, a user would already need elevated permissions Op or Admin to change the connection object in this...

CVE-2023-33234 Apache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration

Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection. In order to exploit this weakness, a user would already need elevated permissions Op or Admin to change the connection object in this...

CrossDomainMessenger relayMessage Vulnerability

Lines of code Vulnerability details Impact The vulnerability allows an attacker to manipulate the sender address sender parameter when relaying a message from Layer 2 L2 to Layer 1 L1 in a cross-domain scenario. The issue arises due to the use of the L2CrossDomainMessenger contract address...

Security Bulletin: A vulnerability in Etcd-io could affect IBM CICS TX Advanced [CVE-2021-28235]

Summary CVE-2021-28235 related to etcd package could affect IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the applicable CVE. CVE-2021-28235 Vulnerability Details CVEID:CVE-2021-28235 DESCRIPTION: Etcd-io could allow a remote attacker to gain elevated privileges on the system, caused b...

Security Bulletin: A vulnerability in Etcd-io could affect IBM CICS TX Standard [CVE-2021-28235]

Summary CVE-2021-28235 related to etcd package could affect IBM CICS TX Standard. IBM CICS TX Standard has addressed the applicable CVE. CVE-2021-28235 Vulnerability Details CVEID:CVE-2021-28235 DESCRIPTION: Etcd-io could allow a remote attacker to gain elevated privileges on the system, caused b...

CVE-2023-31747

Wondershare Filmora 12 Build 12.2.1.2088 was discovered to contain an unquoted service path vulnerability via the component NativePushService. This vulnerability allows attackers to launch processes with elevated privileges...

Design/Logic Flaw

Wondershare Filmora 12 Build 12.2.1.2088 was discovered to contain an unquoted service path vulnerability via the component NativePushService. This vulnerability allows attackers to launch processes with elevated privileges...

Apple iTunes 安全漏洞

Apple iTunes is a suite of media player applications from Apple Inc. that are used to play and manage digital music and video files. A security vulnerability exists in Apple iTunes version 12.12.9, which stems from the possibility that the application may be able to gain elevated privileges...

CVE-2023-31747

Wondershare Filmora 12 Build 12.2.1.2088 was discovered to contain an unquoted service path vulnerability via the component NativePushService. This vulnerability allows attackers to launch processes with elevated privileges...

About the security content of iTunes 12.12.9 for Windows

About the security content of iTunes 12.12.9 for Windows This document describes the security content of iTunes 12.12.9 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

CVE-2023-31747

Wondershare Filmora 12 (Build 12.2.1.2088) is affected by CVE-2023-31747 due to an unquoted service path in the NativePushService, enabling local privilege escalation to SYSTEM. The issue is a unquoted service path vulnerability in the NativePushService executable, used by Filmora 12. Proof-of-co...

PT-2023-23445 · Wondershare · Wondershare Filmora

Name of the Vulnerable Software and Affected Versions: Wondershare Filmora 12 Build 12.2.1.2088 Description: The issue is related to an unquoted service path vulnerability via the NativePushService component. This allows attackers to launch processes with elevated privileges. Recommendations: For...

CVE-2023-31747

Wondershare Filmora 12 Build 12.2.1.2088 was discovered to contain an unquoted service path vulnerability via the component NativePushService. This vulnerability allows attackers to launch processes with elevated privileges...

Exploit for Incorrect Authorization in Cacti

CVE-2022-46169 CVE-2022-46169 is a security vulnerability fou...

elevatedhomeproducts.com Cross Site Scripting vulnerability OBB-3355248

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

USN-6107-1: Linux kernel (GCP) vulnerabilities

It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for this CVE, kernel support for the...

Google Android elevation of privilege vulnerability (CNVD-2023-41881)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates due to a flaw in a framework component and can be exploited by an attacker to gain elevated privileges...

About the security content of iOS 15.7.6 and iPadOS 15.7.6

About the security content of iOS 15.7.6 and iPadOS 15.7.6 This document describes the security content of iOS 15.7.6 and iPadOS 15.7.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...